Moving Existing Bracket Domains to Bracket with Shield

Description

Domains that use Bracket before using Shield will need extra steps performed to ensure that Bracket continues to work correctly once Shield is enabled.

Moving Bracket to Shield

Align the MX record

Check the MX record for the domain that will move to Bracket. It must be set to the Microsoft 365 tenant's MX record. To verify this record:

1. Log in to the Microsoft 365 Admin Center.
2. Click on Settings and visit the Domains tab.
3. Click on the primary (default) domain that is moving to Shield.
4. Click on DNS records
5. Click on MX.
6. If the value does not match the DNS host MX record: click to copy the MX record value and move to step 7.
   
   

   The value shown in the image is an example. Follow the steps above to use the domain's correct value as the MX record.

   If the values match, no change is needed and step 7 can be skipped.
7. Replace all MX values in the domain's DNS host with one entry of the copied value.

Onboard the Domain to Shield

Perform all actions in the Shield Organization Setup article to onboard the domain to Shield.

Onboarding Shield creates a new Bracket Trigger connector and a Shield - Send to Bracket transport rule. Please leave these enabled when disabling the previous Bracket rule and connector (see below).

Transfer Console Settings to Shield and Select Bracket Users

Perform all actions in the Enabling Bracket with Shield article to customize Bracket and choose mailboxes that will use Bracket with Shield.

The Encryption tab of the domain Mailprotector Console can be used to copy and paste or refer to existing values used before onboarding the domain to Shield.

Disable the Existing Bracket Transport Rule and Connector

For MX-less Bracket domains, the previously created Bracket Rule and Bracket Connector in Microsoft 365 must be disabled.

This action can be taken before onboarding the domain to Shield. However, disabling the Bracket rule and connector will result in a Bracket outage until the domain is onboarded to Shield and users are selected for Bracket. If you choose to disable the rule and connector before deploying Shield, we recommend warning the domain users that they cannot send Bracket messages during this time.

To disable the rule and connector:

1. Log in to the Exchange Admin Center.
2. Click on Mail Flow then on Rules.
3. Locate the Bracket Rule created before the current date and Disable or Delete the rule.
4. Click on Mail Flow then on Connectors.
5. Locate the Bracket Connector created before the current date and Disable or Delete the rule.

Getting Help

If you need assistance, please contact the Partner Success team.

Updated June 05, 2025 16:10